Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/12F98C3A322C11F09C0E00A8DAE4EC9C.roa
File: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (raw, json)
Hash identifier: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=
Subject key identifier: 28:3C:71:CD:5F:C4:D9:E7:A3:57:A7:06:EA:0B:70:53:74:83:88:94
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 017E
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/12F98C3A322C11F09C0E00A8DAE4EC9C.roa
Signing time: Fri 16 May 2025 08:02:13 +0000
ROA not before: Fri 16 May 2025 08:02:08 +0000
ROA not after: Mon 31 Dec 2035 08:02:08 +0000
asID: 329278
IP address blocks: 102.212.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: May 16 08:02:08 2025 GMT
Not After : Dec 31 08:02:08 2035 GMT
Subject: CN=6826f105-9cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:39:eb:5a:e8:33:8f:f5:e5:fa:77:0b:bb:
fe:c2:a9:62:f5:96:a8:d6:e9:80:6d:94:70:c7:2e:
11:85:b0:36:52:a7:ab:15:26:e3:a1:0b:4d:c2:79:
de:6e:4d:e7:fb:7e:82:88:1a:41:4f:83:1b:c8:fb:
79:ff:a5:b1:fe:bd:3e:8f:44:fc:e8:7b:6e:6e:0d:
71:e9:30:66:ef:91:be:90:10:84:29:4f:a0:c5:d4:
ef:64:d8:6d:02:1f:4c:a7:03:6c:af:c9:3e:b0:12:
05:9c:f8:0b:c8:04:8d:08:74:c7:0e:d4:52:ea:4a:
af:d3:92:6b:91:9a:f9:de:db:8e:bb:7e:70:a3:61:
c2:90:f5:47:5c:86:f9:73:d7:9d:04:a6:43:bd:d8:
d3:34:ea:bb:83:fc:06:07:4f:a5:25:68:4f:23:96:
10:eb:66:64:83:de:6b:53:5f:be:14:55:49:66:da:
e5:32:43:dc:bb:52:cb:bb:1a:fb:5b:6b:27:d3:eb:
f2:a1:2b:dd:73:ec:15:37:73:39:18:09:72:4b:ab:
b1:98:f6:e6:79:fa:06:85:5b:01:0e:e6:ec:12:94:
2c:24:b4:ea:d4:eb:bb:20:8e:f7:11:9f:51:7d:ad:
84:d9:5f:08:18:6b:d5:03:7b:ce:bc:a7:ab:bb:e7:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:71:CD:5F:C4:D9:E7:A3:57:A7:06:EA:0B:70:53:74:83:88:94
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/12F98C3A322C11F09C0E00A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7a:a1:aa:19:c4:7b:b2:95:f6:5e:09:9d:af:e1:c1:f3:ba:
73:8a:ea:5a:ba:d3:cd:0c:0e:42:75:ff:83:de:06:3a:c6:26:
5f:26:5e:7d:4e:6f:b1:14:ec:49:21:0a:35:86:cf:17:6b:8e:
2f:5a:b2:e7:59:ed:f0:20:5c:64:39:04:1f:be:da:fa:60:4f:
20:5b:19:d3:db:96:84:22:dd:26:ac:3b:6e:80:15:42:20:43:
0f:bc:78:14:33:75:ac:52:6f:db:2f:1b:be:3a:ee:0b:8e:75:
d5:85:bf:00:81:1b:80:3e:dc:f9:51:5d:17:a4:56:be:69:9f:
34:18:34:52:d7:98:fa:9b:c5:d7:ef:f9:9b:32:62:eb:9d:53:
09:44:fa:41:81:d1:c3:de:7f:f0:74:02:61:09:41:f4:5b:11:
24:03:56:e4:3a:4d:3d:aa:8d:90:48:0c:8f:b5:b4:de:c6:6a:
86:b0:4d:d2:43:a4:cf:d6:ae:59:ef:ba:3e:02:bb:ea:3a:c7:
e9:40:cb:10:5a:c2:cb:e8:6e:08:f9:c2:69:d3:63:4b:b0:c1:
f9:2c:65:a4:4d:72:bc:97:5a:cd:69:b1:2f:4e:6c:e7:c7:28:
34:73:34:95:1f:e3:e8:20:00:c9:32:42:b4:57:ce:a3:30:31:
4a:a8:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:21:05 2025 by rpki-client